Server module 4
By default, the only site created within a new forest does not contain any domain controller. a. True b. False
B. False
Purple Guy from NAF recently received a promotion to lead a team of 35 software engineers, testers, and business analysts. When he needs to send an email or meeting invite to his team, he realizes that he must type out the email IDs for all his team members. He approaches Priyanka from the IT team to help him make this process easier and more efficient, Which of the following features of Active Directory can Priyanka use to provide a solution? a. Universal Group Membership Caching b. User Principle Name c. Selective authentication . Distribution groups
D. Distribution groups
A user, Peta. T.(not from the hunger games) is trying to access their system while the global catalog server for the domain is offline. What is the most likely outcome? a. Peta. T will not be allowed to log in to the system because the global catalog server is not available. b. Peta. T will be allowed to log in and access resources across the domain. c. Peta. T will be locked out of their account until the domain controller can access the global catalog. d. Peta. T will be allowed to log in to the system with cached credentials.
D. PETA .t will be allowed to log in to the system with cached credentials
Which of the following organizations should consider using Azure Active Directory? a. An organization that subscribes to Office 365 services b. An organization that has a substantially onsite workforce c. An organization that uses IIS as a web server d. An organization that deploys Internet accessible services, such as FTP or DNS
A. An organization that subscribes to Office 365 services
Kettle Inc. from Florida-man Florida merges with Blues Clues Networks from Minneapolis. Mr. Salt, a system administrator, is granted the responsibility of configuring Active Directory across both locations to enable users from both locations to access common resources. If Minisha is able to accomplish this task suecessfully, which of the following must be true? a Mr. Salt is a member of the Enterprise Admins group in both organizations. b. Mr. Salt is a member of the Domain Admins group in both organizations. c. Mr. Salt has run the following command: Get-ADForest | select SchemaMaster, DomainNaming Master. d. Mr. Salt has run the following command: Set-ADDomainMode -Identity domainX.com -DomainMode Windows2012R2Domain.
A. Mr. Salt is a member of the enterprise admins group in both organizations
Raven who is totally not a Teen Titan is adding FSMO roles to domain controllers in the domain.com forest. The forest contains a single domain and three domain controllers, DC1, DC2, and DC3. DCl contains a copy of the global catalog, and all three domain controllers have the latest version of Windows Server 2019 installed. Which of the following is a best practice that Raven should follow? a.She should create the Domain Naming Master role on DCI. b. She should use DC2 or DC3 as the Domain Naming Master. c. She does not need to create the Domain Master role because DCl contains a copy of the global catalog. d. She should create three Domain Naming Master roles, one for each domain controller.
A. She should create the domain naming master role in DC1
Azure Active Directory can be configured to trust an organization's Active Directory forest, or mirror it using a synchronization service. a. True b. False
A. True
If a site cannot hold a copy of the global catalog, which of the following features can be enabled on the site to provide fast authentication? a. Universal Group Membership Caching b. Flexible Single Master Operations c. Role seizure d. User Principle Name
A. Universal group membership caching
Anakin is the system administrator at an organization that has offices in two different locations, New York and Sao Paulo. He decides to create sites for each location, NewY orkSite and SaoPauloSite, to improve Active Directory replication. Once she creates the sites, she associates New YorkSite with the IP address 10.1.0.0/16. Which of the following is true of this scenario? a When new domain controllers are added to this network, they will be added to New YorkSite by default. b. Assigning an IP address to a site indicates that domain controllers within this site contain the global catalog. c. Anahira will not be able to install or use Simple Mail Transfer Protocol (SMTP) to perform Active Directory replication. d. This restriets the creation of bridgehead servers, and only NewYorkSite will contain bridgehead servers.
A. When the new domain controllers are added to this network, they will be added to new YorkSite by default
Which of the following statements about directory partitions is true? a. Changes to a domain partition on a domain controller are only replicated to domain controllers within the same domain. b. The largest section of the Active Directory database is the configuration partition. c. Schema partitions store the structure and layout of the forest, including the names of each domain and their trust relationships. d. If any change is made to a configuration partition, the change is also replicated in the schema partition.
A.Changes to a domain partition on a domain controller are only replicated to domain controllers within the same domain.
By default, a new domain has six organizational units: Domain Controllers, Builtin, Computers, ForeignSecurityPrincipals, Managed Service Accounts, and User. a. True b. False
B. False
If domaini.com is the forest root domain, you can use the command Set-ADForestMode Windows2012R2Domain to raise the forest functional level to Windows Server 2012 R2. a. True b. False
B. False
What is the term for domain and forest functions that must be coordinated from a single domain controller? a. Universal Group Membership Caching b. Flexible Single Master Operations c. Role seizure d. User Principle Name
B. Flexible single master operations
Papa Johns, an IT administrator for an organization, installs a new application on 150 computers used by programmers in the organization. She does this with a few clicks only for this specific set of users without impacting the rest of the organization. Which of the following features of Active Directory is exemplified by Sanya's actions in this scenario? a. A member server b. Group Policy c. A standalone server d. Access Control List
B. Group policy
Olive Garden is the system administrator at an organization that has offices spread across three locations, Boston, London, and Paris. The organization has an Active Directory domain, domainA.com, with two domain controllers in each location for the marketing business unit. The company expanded recently and added over 3000 new users across these locations. Hiroshi notices that this surge in users is causing Internet congestion because of the Active Directory replication. What is a cost-effective method of dealing with this issue? a. Hiroshi should create separate domains for each location to avoid the need for replication. b.Hiroshi should create site objects and specify timed intervals for replication using site link objects. c. Hiroshi should reduce the number of domain controllers to just one per physical location. d. Hiroshi should remove all domain controllers and have only one domain controller for the domain.
B. Hiroshi should create site objects and specify timed intervals for replication using site link objects.
What is the use of the New-ADReplicationSite Windows PowerShell emdlet? a. It can be used configure the replication settings within a site link object. b. It can be used to create a new site object. c. It can be used to change the bridgehead server in a site. d. It can be used to launch the Active Directory Sites and Services tool.
B. It can be used to create a new site object
Which of the following statements regarding a domain functional level is accurate? a. Unlike forest functional levels, you can revert to a previous domain functional level after it has been raised. b. It represents the oldest Windows Server version that can be used on a domain controller. c. A server containing Windows Server 2016 cannot run on a domain at the Windows Server 2019 functional d. It applies to domain controllers, clients, and other servers that are present in the domain.
B. It represents the oldest windows Server version that can be used on a domain controller.
the Active Directory Administrative Center. What is the most likely reason for not using the Active Directory Administrative Center? a. It does not support features introduced within Windows Server 2008 R2 and later functional levels. b. It uses a minimal color interface that is similar to the one provided by Server Manager. c. It can only be used to manage OU, user, group, and computer objects, but not to create these objects d. It is a command line tool similar to Windows PowerShell that requires the use of cmdlets
B. It uses a minimal color interface that is similar to the one provided by server manager
Rally's is adding FSMO roles to domain controllers in the domainG.com forest. The forest contains other domains. domainG.com contains two domain controllers, DC1 and DC2. DC1 contains a copy of the global catalog. Which of the following is a best practice that Rally's should follow? a. She should create the Domain Naming Master role on DC2. b. She should create the Infrastructure Master role on DC1. c. She does not need to create the Domain Master role because DC contains a copy of the global catalog. d. She does not need to create the Infrastructure Master role because the forest contains multiple domains.
B. She should create the infrastructure master role on DC1
recently promoted employee at your company has called you because they attempted to log in to their computer several times with a password created after a password expiry notice, but the attempts made were unsuccessful. You have reset the user's account password, but the user is still unable to log in. What is most likely the cause of the a. The user is in a new OU and lacks permission to log into the computer used. b. The user's account has been locked because of frequent failed password attempts. c. The computer is having issues communicating with the domain and is attempting to use cached credentials. d. The global catalog server has not replicated the user's account information to the rest of the domain
B. The users account has been locked because of frequent failed password attempts
Team Three Star Technologies wants to enforce a strict timings policy such that users are able to log into their systems only during specific time slots on weekdays. The company also wants to restrict access on weekends. Anyone but Yamcha, a system administrator at TTS, is tasked with enforcing this change. What tab under a user object's properties will allow Anyone but Yamcha to make this change? a. Profile b. General c. Account d. Organization
C. Account
Fazoli's is the system administrator at an organization that has offices in multiple locations. The domain controllers in each location are within location-specifie sites to improve Active Directory replication. Faustino notices performance issues in the Active Directory replication across sites. Which of the following measures can Fazoli's use to improve the performance? a. He can restriet the number of domain controllers to one per site. b. He can increase the number of domain controllers to spread the replication load. c. He change the bridgehead server to one with a faster network interface. d. He can use SMTP instead of IP to improve performance.
C. He change the bridgehead server to one with a faster network interface
Jimmy Jahns, a system administrator in an organization, is setting up new Active Directory domains for the Marketing and Sales teams in the organization. Previously, all the marketing and sales employees worked as a single team. Recently, the employees in these teams were reorganized into two separate teams. He is setting up Active Directory domains on Windows 2019 Server to reflect the organizational structure. What is the minimum number of domain controllers that Ahmad should add to the Marketing domain? a. Zero b. One Cc. Two d. Three
C. Two
You are the system administrator at an organization. Most of the servers in your organization, including domain controllers, are running Windows Server 2012 and above. Some servers, excluding domain controllers, are running Windows Server 2008 R2. Most of the clients are running Windows 10, but a few systems are running Windows 7. You have been tasked with improving the security measures of the Active Directory forest by restricting malicious access to Active Directory. You decide to use Privilege Access Management. What should you do next? a. Update the clients that are running Windows 7 to Windows 10 b. Update the servers running Windows Server 2008 R2 to Windows Server 2019 c. Update all the domain controllers running Windows Sever 2012 to Windows Server 2016 d. Revert the domain functional level of each domain in the forest to Windows Server 2016
C. Update all the domain controllers running windows server 2012 to windows server 2016
Klepto Informatics is headquartered in Sydney, Australia, and has smaller branch offices spread across the world. The RODC in one of the branch offices gets stolen. Shannon is the system administrator at Klepto Informatics. What is the appropriate security measure that Shannon should take? a. Shut down all RODCS b. Create a new RODC c. Disable user accounts in the branch office d. Delete the RODC computer
D. Delete the RODC computer
You are the system administrator tasked with raising the domain functional level of domainA.com from Windows Server 2008 to Windows Server 2012 R2. First, you upgrade the domain controllers running Windows Server 2008 to Windows Server 2012 R2, Which of the following commands must you run next in Windows PowerShell to complete your task? a. Set-ADForestMode -Identity domainA.com -ForestMode Windows2012R2Domain b. Get-ADDomain | select PDCEmulator, RIDMaster,InfrastructureMaster c. netdom.exe d.Set-ADDomainMode -Identity domainA.com -DomainMode Windows2012R2Domain
D. Set-ADDomainMode -identity domainA.com -DonainMode Windows2012R2Domain